remove autopublish
remove insecure package